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DETAILED ACTION 

1 . Claims 1-6 are pending in this application and presented for examination. 

Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 . 1 7(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1 . 1 7(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 5/21/09 has been entered. 

Response to Arguments 

3. Applicant's arguments filed 5/21/09 have been fiiUy considered but they are not 
persuasive. 

4. As to claim 1, Applicant argues Smimov is silent on registering user types. However, Ho 
discloses registering user types (Col. 3, In. 4-13; Col. 4, In. 9-11). For example, the type of user 
is a doctor who is authorized to view the records of a particular patient (such as the patient's 
current primary provider). 

5. Further regarding claim 1, Applicant argues (see page 6, lines 1-3) Ho fails to disclose a 
service provider identifier. The Examiner respectfully disagrees. Ho clearly outlines a subject ID 
(Col. 3, In. 4-13, "last name, ... patent identification number, inmate identification number. 
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account number...") and that the user accessing information on the subject through the subject ID 
can be a service provider such as a "a doctor, a lawyer, . . . banlcer" (Col. 2, in. 49-56). Therefore, 
Ho is directed to a service provider (such as a doctor) accessing data records through the use of a 
subject ID that relates the identified subject to the service provider (e.g., a patient's medical 
records may be accessed by a doctor). 

6. Further regarding claim 1, Applicant argues Kesarwani is silent on "allowing the person 
to view stored private data or pseudonyms of the private data." The Examiner respectfully 
disagrees. Kesarwani discloses validating the person's relationship (i.e., remote user) to the 
service provider (i.e., company) so that access may be provided to private data (e.g., the main 
office's computer resources) (Col. 6, In. 29-38). 

7. Further regarding claim 1 , Applicant argues the service provider identifier cannot be 
provided with a random factor, because no service provider identifier is taught. However, the 
Examiner has refuted this allegation above. 

Claim Objections 

8. Claim 6 is objected to under 37 CFR 1 .75(c), as being of improper dependent form for 
failing to further limit the subject matter of a previous claim. Applicant is required to cancel the 
claims, or amend the claims to place the claims in proper dependent form, or rewrite the claims 
in independent form. 
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Claim Rejections - 35 USC § 103 

9. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

10. Claims 1 and 5-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over Smimov 
et al. (Smimov), U.S. Publication No. 2003/0097383 Al, in view of Ho, U.S. Patent No. 
6,148,342, in view of Kesarwani et al. (Kesarwani), U.S. Patent No. 7,213,258 Bl, and further in 
view of Nordman et al. (Nordman), U.S. Publication No. 2002/0174364 Al. 

11. As to claim 1 , Smimov discloses a method (the body of the claim does not rely upon the 
preamble and therefore, the preamble has not been given patentable weight) comprising: 

persons having private data for storage ([0152], In. 1-2 and 6-10; [0351], hi. 1-2); 

registering the persons with a pseudonymous proxy server as a user type with associated 
pseudonyms for each user and pseudonyms for the respective person's stored private data 
([0128]; [0132]); and 

the pseudonymous proxy server providing each person's associated pseudonym ([0128]; 
[0132]). 

Smimov is silent on assigning respective unique identifications (UIDs) to the persons; 
sets of rules that control access to the respective person's stored private data by persons 
registered with the pseudonymous proxy server based at least on user type; 
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providing service provider identifiers to each person that identifies the respective persons 
to a service provider; 

the pseudonymous proxy server providing each person's service provider identifier with a 

random factor; 

transmitting a message from one of the persons to the service provider through the server, 
wherein the server receives the message and, based on the set of rules that confrol said one 
person's access to the stored private data of a person, validates a relationship between said one 
person and the service provider and fransmits the message to the service provider if the 
relationship between said one person and the service provider is validated; and 

said server authorizing said one person to view the stored private data of said person 
based on said set of rules that confrol said one person's access to said stored private data of said 
person. 

However, Ho discloses assigning respective unique identifications (UIDs) to persons 
(Col. 3, In. 4-13; Col. 3, In. 63 - Col. 4, In. 2); 

persons registered with the server based at least on user type (Col. 3, hi. 4-13; Col. 4, hi. 
9-11); and 

providing service provider identifiers to each person that identifies the respective persons 
to a service provider (Col. 3, In. 4-13). 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Smimov by assigning a unique identification (UID) to a person as 
taught by Ho in order to uniquely identify individual persons, such as patients, in order to obtain 
the proper data, such as medical records for a specific patient. 
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It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Smimov by providing a service provider identifier to the person that 
identifies the person to a service provider in order to enable a service provider to obtain 
information on a relevant subject. 

Smimov and Ho are silent on sets of rules that control access to the respective person's 
stored private data; 

the pseudonymous proxy server providing each person's service provider identifier with a 
random factor; 

transmitting a message from one of the persons to the service provider through the server, 
wherein the server receives the message and, based on the set of rules that control said one 
person's access to the stored private data of a person, validates a relationship between said one 
person and the service provider and transmits the message to the service provider if the 
relationship between said one person and the service provider is validated; and 

said server authorizing said one person to view the stored private data of said person 
based on said set of rules that control said one person's access to said stored private data of said 
person. 

However, Kesarwani discloses sets of rules that control access to the respective person's 
stored private data (Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38); 

transmitting a message from one of the persons to the service provider through the server 
(Fig. 3; Col. 6, In. 29-38), wherein the server receives the message and, based on the set of rules 
that control said one person's access to the stored private data of a person, vaKdates a 
relationship between said one person and the service provider and transmits the message to the 



Application/Control Number: 1 0/623 ,262 Page 7 

Art Unit: 2452 

service provider if the relationship between said one person and the service provider is validated 
(Fig. 3; Col. 6, In. 29-38); and 

said server authorizing said one person to view the stored private data of said person 
based on said set of rules that control said one person's access to said stored private data of said 
person (Fig. 3; Col. 6, In. 29-38) 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Smimov and Ho by including a set of rules that control a person's 
access to stored data and validating relationships between a person and a service provider based 
on the access rules in order to determine if access should be provided to private data of another 
user as taught by Kesarwani in order to prevent unauthorized access to data, such as information 
related to a person or persons other than the user accessing a database. 

Smimov, Ho, and Kesarwani are silent on the pseudonymous proxy server providing each 
person's service provider identifier with a random factor. 

However, Nordman discloses a pseudonymous proxy server providing a service provider 
identifier with a random factor ([0013], In. 2-6; [0094]). 

Applying a random factor to the generated pseudonym is a logical extension of Smimov, 
Ho, and Kesarwani. The intention of a pseudonym is to increase the privacy of a user. Therefore, 
assigning a pseudonym in a static or predictable manner would lessen the effectiveness of the 
pseudonym's intended use. Therefore, randomly assigning the pseudonym would increase the 
likelihood that a user's privacy is protected, as it would be more difficult to relate the pseudonym 
to the user absent a predictable assignment technique. 
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It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of Smimov, Ho, and Kesarwani by having the pseudonymous proxy 
server provide the service provider identifier with a random factor as taught by Nordman in order 

to gain the above-mentioned benefits. 

12. As to claim 5, Smimov, Ho, Kesarwani, and Nordman disclose the invention 
substantially as in parent claim 1, wherein the pseudonymous private data for a person registered 
with the pseudonymous proxy server is the person's medical records (Smimov: [0152]) and said 
two or more data storage servers are controlled by respective medical service providers (Ho: Fig. 
3C; Col. 2, In. 57 - Col. 3, In. 4; Col. 7, In. 46-63), where said person and said respective 
medical service providers are permitted access to said person's medical records based on said set 
of mles (Kesarwani: Fig 3; Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38), and wherein a transfer 
of said patient's medical records from one medical service provider to another medical service 
provider includes the replacing of the another medical service provider's name with a 
pseudonym (Ho: Abstract; Kesarwani: Fig 3; Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38), 
pseudonymizing the person's medical records in accordance with the another medical service 
provider's access rights (Smimov: [0128]; [0132]; [0152]; Ho: Col. 2, In. 57 - Col. 3, In. 13; 
Kesarwani: Fig 3; Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38), and providing the access rights 
to the another medical service provider based on authorization to the person's medical records as 
granted by the person (Smimov: [0128]; [0132]; [0152]; Ho: Col. 2, In. 57 - Col. 3, In. 13; 
Kesarwani: Fig 3; Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38). 
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13. As to claim 6, the claim is rejected for reasons similar to claim 1 above. 

14. Claims 2-4 are rejected under 35 U.S.C. 103(a) as being unpatentable over Smimov, Ho, 
Kesarwani, and Nordman as applied to claim 1 above, and further in view of what was well 
known in the art at the time of the invention. 

15. As to claim 2, Smimov, Ho, Kesarwani, and Nordman disclose the invention 
substantially as in parent claim 1, wherein the pseudonymous proxy server controls unique 
identifications (UIDs) (Ho: Col. 3, In. 4-13) and sets of rules for respective persons among 
multiple servers (Kesarwani: Col. 4, In. 51-54 and 59-67; Col. 6, In. 29-38). 

Smimov, Ho, Kesarwani, and Nordman are silent on a hub and spoke network 
configuration. 

However, Official Notice is taken (see MPEP 2144.03) that a hub and spoke network 
topology is extremely well known in the art. Hub and spoke networks are a desirable alternative 
to ring networks in that network failure is reduced through decentralizing whereas in a ring 
network a single point of failure could bring down a network. 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Smimov, Ho, Kesarwani, and Nordman by using a hub and 
spoke network configuration as is extremely well known in the art in order to reduce the 
likelihood of network failure. 



16. As to claim 3, the claim is rejected for the same reasons as claim 2 above. 
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17. As to claim 4, Smimov, Ho, Kesarwani, and Nordman disclose the invention 
substantially as in parent claim 1, but are silent on the person encryption said pseudonym. 

However, Official Notice is taken (see MPEP 2144.03) that encryption is extremely well 
known in the art. Encryption adds an extra layer of security, which is all the more important in 
teachings geared toward pseudonyms to protect data, such as in Smimov, Ho, Kesarwani, and 
Nordman. 

Therefore, it would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Smimov, Ho, Kesarwani, and Nordman by having a person 
encrypt a pseudonym as is extremely well known in the art in order to add an extra layer of 
security to the protected data. 

Conclusion 

18. Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to BRIAN P. WHIPPLE whose telephone number is (571)270-1244. 
The examiner can normally be reached on Mon-Fri (9:30 AM to 6:00 PM EST). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John FoUansbee can be reached on (571) 272-3964. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Elecfronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Brian P. Whipple 
IB. P. W./ 

Examiner, Art Unit 2452 

6/3/09 

/Dohm Chankong/ 

Primary Examiner, Art Unit 2452 



